XPT SoftwareAustralia PTY Ltd, incorporated in ****, is a Software Services companyXPT works with topclients across Australia in Banking, Insurance, Telecom,Retail, Energy, Mining and Manufacturingdomains.We have 120+technocrats in Australia working at our clientlocations.XPT SoftwareAustralia is part of group companies which has globalpresence across India & Europe.We have served100+ clients globally, fulfilling their onsite-offshoreneeds.Role SummaryThe Cyber Security Engineer isresponsible for supporting NIST CSF / NIST 800 assessments, triagingpenetration test findings, and driving remediation activities acrossapplication, infrastructure, network security, and monitoring platforms.The role is hands-on and deliveryfocused, working closely with architects, platform owners, SOC, andinfrastructure/application teams to translate security findings into actionablefixes, validate control effectiveness, and support audit‐ready evidence forregulated/government environments.Key ResponsibilitiesNIST Assessment Support (CSF / NIST 800Series)SupportNIST CSF / NIST ************************ assessments through:Controlevidence collectionGapanalysis supportMappingtooling controls to NIST requirementsAssistarchitects and governance teams in preparing:Controlimplementation summariesToolcapability mappingEvidencepacks for audits and client reviewsTrackand manage security gaps, risks, and remediation actions in line withagreed timelinesSupportcontinuous improvement initiatives driven by assessment outcomesPenetration Test Findings &RemediationTriageand; analyse application, infrastructure,



and network penetration testfindingsWorkwith platform and application teams to:Prioritiseremediation based on risk and exploitabilityExecuteor support remediation actions such as:Controlenablement or enhancementTrackremediation status and provide explicit closure evidence for governance andaudit forumsActivitiesinclude:Policytuning and baseline hardeningCoverageand health checksSupportingremediation of vulnerabilities and misconfigurationsSupport security controls across:Ciscosecurity platformsImpervaMicrosoftGSA / related network security controlsResponsibilities include:Supportingfirewall / network security rule reviews and clean‐upsAssistingwith remediation of network‐related pen test findingsSupportingchange validation and post‐implementation checksWorkingwith network teams to ensure security controls align with NIST and secure‐by‐designprinciplesSupportSIEM and monitoring platforms:SplunkMicrosoftSentinelAssistwith:Detection coverage checks related to NIST andpen test scenariosValidation that remediated controls generateexpected telemetrySupportSOC teams with investigation data where requiredRemediationactionsControlchangesEvidencerequired for audits and MSSR / governance reviewsIncident and problem reviews (P1 / P2 support)Root cause analysis where control gaps areidentifiedFollowstructured change and release processes (CAB, validation, rollback awareness)Skills &Experience5; years experience in security engineering / SecOps / blue teamrolesExposure to NIST CSF or NIST 800 frameworksHands‐on experience supporting remediation across:Endpoint / infrastructuresecurity toolsVulnerability managementplatformsNetwork security controlsExperience working with penetration test reports and remediationtrackingFamiliarity with SIEM platforms (Splunk and/or Sentinel)
#J-*****-Ljbffr

📌 Soc Analyst (Melbourne)
🏢 XPT Software
📍 Melbourne